IT monitoring
IT monitoring focuses mainly on the proper functioning of your environment. An unavailable server, a saturated resource, a failed backup or an unresponsive service: its purpose is to detect operational problems.
AWSMTECH × SecuLabs
24/7 SOC: cyber threat monitoring and detection
Continuous cyber monitoring, operated from Geneva, to detect threats before they become major incidents.
Continuous monitoring
Your business may work 9 hours a day. Cyber threats never stop.
Antivirus, firewalls, backups and multifactor authentication are essential protections. But when an attack gets past these first barriers, another capability becomes indispensable: being able to detect it and respond.
With Rempart, AWSMTECH and SecuLabs provide SMEs with continuous threat monitoring, 24 hours a day, 7 days a week, operated from Geneva.
A cybersecurity team watching over your environment, even when your teams are not working.
Definition
What exactly is a SOC?
A SOC, or Security Operations Center, is a capability dedicated to monitoring and analysing security events. Its role is to detect signals that may reveal an attack or unusual behaviour and to enable an appropriate response.
Unlike a simple tool that generates alerts, Rempart combines technology and human analysis: critical alerts are analysed and handled by experts.
Technology detects. Experts analyse. Your business can respond.
Monitoring vs SOC
IT monitoring and SOC: two different missions
SOC
A SOC focuses on the security of your environment. Its purpose is to detect behaviour that may indicate an intrusion or malicious activity.
A system can technically run normally while malicious activity is taking place on it. This is precisely the difference between operational monitoring and security monitoring.
Monitoring checks that your IT is working. The SOC watches whether it is under attack.Your business needs both.
Rempart
Rempart: your 24/7 SOC operated from Geneva
Building a permanent cyber monitoring capability requires technology, skills and a specialised organisation. Rempart was designed to make this level of monitoring accessible to SMEs without requiring them to build an in-house cyber team.
The solution monitors, analyses and responds to threats, while critical alerts benefit from human analysis. The service runs continuously, all year round.
A cybersecurity team, without having to build one in-house
Your environment stays under watch. 24/7.
Scope
What Rempart monitors
Rempart covers four main types of risk:
Malware & ransomware
Detection of malicious software and activity that may reveal a threat to your systems.
Intrusion attempts
Detection of suspicious logins, mass password-guessing attempts or access from unusual locations.
Abnormal behaviour
Identification of signals that may indicate an ongoing attack, such as mass file changes or suspicious encryption activity.
Known vulnerabilities
Identification of vulnerabilities on monitored computers and servers, classified by risk level.
Alert triage
From thousands of events to a few alerts that really matter
Less noise. More context.
An IT environment constantly generates large numbers of events. The challenge is therefore not simply to collect more information. You need to be able to tell what is normal from what genuinely requires your attention.
Rempart analyses and correlates events to detect weak signals. Its artificial intelligence helps triage alerts so that experts can focus on the events deemed relevant.
The cycle is based on four steps:
- Observe
- Analyse
- Triage
- Inform
You then have access to a portal presenting prioritised alerts and guidance on the actions to take.
Human analysis
People remain at the heart of detection
Automation makes it possible to analyse large volumes of events. But when a critical alert occurs, understanding its context remains essential. Rempart therefore combines technological processing with analysis by human experts.
This combination aims to avoid two common situations:
Too little information
→ An attack goes unnoticed.
Too many unqualified alerts
→ Nobody really knows which ones to handle first.
The role of the SOC is precisely to turn security data into actionable information.
Sovereignty
Your data stays in Switzerland
An approach designed for organisations that care about data sovereignty
The data collected and analysed is hosted and processed exclusively in a Geneva datacenter, with no transfer abroad. Processing, AI triage and security operations are all carried out locally.
The retention period can also be defined according to the client's needs and regulatory obligations.
- Hosting
- Processing
- Artificial intelligence
Your data stays on Swiss infrastructure.
Framework
Detection based on MITRE ATT&CK
A more structured view of your security coverage.
Rempart relies on MITRE ATT&CK for its detection capabilities and distinguishes between what the service can potentially detect, what is actually monitored once log sources are connected, and the activity actually observed over the period.
Architecture
An architecture adapted to your environment
Monitoring can integrate various sources from your IT environment:
- Workstations
- Servers
- Firewalls
- Microsoft 365
- Azure
- Cloud sources
Information is collected through agents and connectors, then transmitted in encrypted form via VPN/TLS. It is then analysed and correlated by the Rempart Lean SOC in Geneva before being presented in the client portal.
Compliance
24/7 SOC and compliance
Detection also contributes to your cyber governance
For an organisation subject to regulatory requirements, knowing how to protect its environment is no longer always enough. It must also be able to detect incidents, have traceability evidence and organise its response.
A SOC contributes to DORA's detection and response requirements, but on its own it does not make an organisation compliant.
A SOC does not guarantee your compliance. It helps put in place the technical detection, monitoring and response capabilities your cybersecurity framework needs.
Pricing
Protection sized to your business
You protect what really matters to your organisation.
Not all businesses have the same infrastructure. Rempart's pricing is therefore adapted to the actual size of the protected environment.
It takes into account the volume of logs sent, the number of workstations and servers protected by agent, and any cyber resilience services. Base retention is 30 days, extendable.
Why Rempart
Why Rempart?
24/7 monitoring
Continuous monitoring of your environment throughout the year.
Human experts
Critical alerts are analysed and handled by specialists, not just by software.
Operated from Geneva
The data collected and analysed is hosted and processed on Geneva-based infrastructure.
MITRE ATT&CK
Detection capabilities are structured using the MITRE ATT&CK framework.
IT + Cybersecurity
Rempart combines AWSMTECH's expertise in IT environments with SecuLabs' expertise in cybersecurity and SOC operations.
Frequently asked questions
Frequently asked questions
A Security Operations Center is a capability responsible for monitoring security events in order to identify and analyse potentially malicious behaviour.
They perform different functions. A SOC provides the ability to monitor, correlate and analyse events from various sources across the environment.
IT monitoring mainly tracks the operation and availability of the infrastructure. A SOC monitors security-related events and looks for signs of malicious activity.
Yes. Rempart provides continuous monitoring 24/7, all year round.
The data collected and analysed is hosted and processed in a Geneva datacenter, with no transfer abroad.
No. A SOC is a technical component of your cybersecurity framework. It can contribute to the detection, response and traceability capabilities required by certain frameworks, but compliance covers a much broader organisational and legal scope.
Rempart 24/7 SOC
Cyber threats don't stop when you leave the office.
Your digital environment keeps running. Rempart keeps watching it. With AWSMTECH and SecuLabs, benefit from 24/7 cyber detection and response operated from Geneva, designed to make advanced protection accessible to SMEs.
Schedule a callA question about monitoring your environment? Write to us